Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa
File:                     750f5913-c728-3830-931e-bc607abd8f3c.roa (raw, json)
Hash identifier:          ug5J3g7wE9IrNd/vusQ7MOqLyo4hkxmBFk8X7ojCu7s=
Subject key identifier:   65:08:3F:78:17:8A:B8:9C:DE:B9:45:8A:35:DE:CE:3B:E3:A6:FD:38
Certificate issuer:       /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
Certificate serial:       010D0C9F4328584F189790E93D638B41E9BD6DF0
Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     395033
IP address blocks:        2602:ff19::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:90:e9:3d:63:8b:41:e9:bd:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=8e8e7b2d-124b-4a72-a409-723361f6272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:23:58:19:2e:d2:01:45:f3:02:72:a0:91:
                    f8:a9:e8:ba:1d:3a:6b:64:2a:03:30:75:ec:b5:e3:
                    9a:5e:ea:d6:74:f5:69:f6:97:c3:45:1b:19:ef:b5:
                    3e:1c:1c:50:8f:12:a6:29:74:23:be:f9:87:12:60:
                    19:00:3b:bf:70:f4:22:ad:b8:a0:08:b3:7e:9c:be:
                    70:04:d2:e1:03:2c:f3:f4:4f:e6:be:c3:61:89:1f:
                    e0:e2:58:ef:93:1b:ee:7f:79:40:65:78:97:a2:6c:
                    65:a3:6d:b1:16:26:6c:17:12:20:86:b3:40:bd:74:
                    d0:bf:8d:b0:33:4f:c5:2a:6f:02:c9:3c:95:10:e0:
                    b7:06:64:7f:29:f2:00:52:b3:2e:63:98:7a:06:ed:
                    02:88:5b:54:d6:aa:f8:7d:33:02:e7:47:ea:09:c1:
                    df:6e:d9:eb:b5:88:9a:72:1a:19:9a:6f:8c:3a:96:
                    ef:ff:37:79:71:f0:fe:a5:08:86:68:65:eb:bb:15:
                    bc:86:4d:d1:68:64:18:0a:49:60:1d:0b:70:77:5c:
                    dd:bb:d4:1b:bc:1d:2c:f0:58:54:a3:ae:5d:d9:18:
                    08:f3:1d:04:73:18:86:ad:b4:42:ee:d6:82:dd:87:
                    20:b4:a7:80:26:7c:e5:09:3f:05:26:0f:e7:4a:29:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:08:3F:78:17:8A:B8:9C:DE:B9:45:8A:35:DE:CE:3B:E3:A6:FD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl

            X509v3 Authority Key Identifier:
                keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff19::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e7:2e:de:6d:c6:65:58:7d:5d:d3:98:78:5c:da:b9:00:0a:
         f7:68:f9:a8:da:04:37:64:c4:8f:e6:af:0d:be:04:91:e1:8f:
         6a:75:e4:ba:ff:06:49:43:c9:4e:1b:19:4e:47:26:51:e5:d3:
         e9:b6:01:06:64:96:ba:2f:87:20:29:c7:66:ce:24:e2:69:83:
         ff:22:b6:2e:4d:5f:f7:c8:5d:ed:ca:99:2f:f2:a9:fd:f0:7a:
         a7:f9:48:6c:f0:6a:73:22:a2:af:9c:e9:d9:b6:a0:7b:b4:2f:
         8e:d9:e3:e7:f9:88:31:41:30:38:64:0f:a2:d4:d9:18:24:20:
         a8:f5:21:5c:66:1e:88:a8:e7:81:23:de:08:07:b4:62:89:af:
         7a:7f:fe:2d:dd:14:f4:1a:b2:f4:a8:8d:61:52:ad:d5:7d:4d:
         fa:d5:ed:c6:8c:b9:39:70:19:21:2e:51:0a:e5:6a:b8:b6:1f:
         fe:cb:0c:1b:6d:4e:41:1d:c1:55:90:a4:13:66:99:0e:19:ec:
         15:0c:44:95:1d:24:0a:68:52:97:3c:b2:fe:74:bf:63:e1:3a:
         ba:bb:e6:f7:1a:64:72:e3:05:c4:ae:c2:18:4f:dd:1f:23:47:
         4f:16:7a:7d:e5:ed:d0:fd:8a:7a:ff:53:c1:de:d4:73:2f:a6:
         df:c4:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:46:24 2026 by rpki-client